The correct statements regarding FortiGate HA cluster virtual IP addresses are:
B. A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.
C. Virtual IP addresses are used to distinguish between cluster members.
Explanation:
B. When a FortiGate device joins or leaves the cluster, the virtual IP address associated with the cluster may change. The virtual IP address is assigned to the primary device in the cluster, and if that device fails, the virtual IP address will failover to the secondary device.
C. Virtual IP addresses are used to distinguish between cluster members. Each device in the cluster has a unique physical IP address, but they share a virtual IP address that is used by clients to communicate with the cluster as a whole. The virtual IP address is used to identify the cluster, and clients use it to connect to the cluster rather than connecting to a specific device.
Page 311 infra study guide. a change in the heartbeat ip addresses might happend when a fortigate device joins or leaves the cluster. In those cases, the cluster renegotiates the heartsbeat ip address assignment, this time taking into account the serial number of any new device, o r removing the serial number of any device that left the cluster & cluster uses these virtual ip addressesto: Distinguish the cluster member
The ip address 169.254.0.1 assings to the highest "SERIAL NUMBER" not to primary device
I think the question is a bit misleading... it asks regarding "cluster virtual IP addresses" but all the answer is related to heartbeat ip addresses. If we consider "heartbeat ip addresses", question A&B are correct.
C is wrong because IP are not manually assigned
D is wrong becasue ip 169.254.0.1 is assigned to fortigate with highest serian number regardless the device role.
AB for sure, virtual IPs means the IPs assigned to the heartbeat interfaces, and it's changed when a member joins as it's dependent on device SN, and for sure it's used to distinguish between cluster members
C is not correct, the assigned ip its automatic.
D is not correct, the assigner IP not depend of the type (primary or secundary)
FortiGate_Infrastructure_7.0_Study_Guide page 311
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
princelionelnzi
3 months, 4 weeks agom_farhoud
3 months, 2 weeks agoBUZOMD
3 months, 4 weeks agoManilo
4 months, 3 weeks agohamidreza0010
4 months, 4 weeks agohamidreza0010
4 months, 1 week agostapy
5 months, 2 weeks agoPoBratsky
6 months, 1 week agoDID123
6 months, 2 weeks agolearner_88
7 months agowhatz
7 months ago[Removed]
7 months agoSisCCA
7 months, 1 week agoiseeusee
8 months, 2 weeks agoDumps345
8 months, 2 weeks agoKraziest
8 months, 3 weeks ago